194 jobs found

Job Description Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret SCI + Polygraph Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Program Delivery and Execution Job Qualifications: Skills: Desktop Publishing (DTP), Technical Documents, Technical Writing Certifications: Security+CE - CompTIA - CompTIA Experience: 5 + years of related experience US Citizenship Required: Yes Job Description: Own your career as a Technical Writer at GDIT. Here, you'll have the opportunity to build strong lines of systems engineering and develop your skills using cutting-edge technologies. Your work in technical writing at GDIT will have an impact on securing our clients' missions and ensuring we anticipate the threats of tomorrow. At GDIT, people are our differentiator. As a Technical Writer supporting Government activities in Sterling, VA or Annapolis Junction, MD, you will transform complex technical information into clear, accurate, and user ready documentation that supports engineering, operations, and enterprise IT services. You will develop and maintain high-quality standards, procedures, guides, and technical artifacts that strengthen system understanding, ensure consistency, and enable effective implementation across globally distributed environments. HOW A TECHNICAL WRITER WILL MAKE AN IMPACT: Prepare, write, edit, and maintain technical documents including SOPs, system guides, engineering documents, test plans, user instructions, reference materials, and process documentation Translate complex engineering and technical information into clear, concise documentation for diverse audiences Develop documentation using standardized templates to ensure accuracy, consistency, and compliance Collaborate with engineering, operations, and technical SMEs to gather information, validate content, and ensure documentation reflects system functionality and processes Produce diagrams, instructions, and supporting artifacts to clarify workflows and system behavior Maintain version control and ensure documents remain current throughout the engineering and operations lifecycle Support knowledge management by organizing, updating, and publishing technical content in designated repositories WHAT YOU'LL NEED TO SUCCEED: Education: Bachelor's degree in an IT-related field, or 8+ years of relevant IT experience in lieu of a degree Experience: Minimum 6 years of technical writing or lead writing experience Proven ability to translate complex technical concepts into user-friendly materials Experience working with technical SMEs and supporting documentation for engineering and operational lifecycles Demonstrated success developing and maintaining SOPs, manuals, and technical/engineering documentation Technical Skills: Proficiency with Microsoft Office Suite Soft Skills: Strong writing, editing, formatting, and documentation management skills Strong communication, organization, and cross-team coordination skills Security Clearance Level: Active TS/SCI with Polygraph Location: On Site GDIT IS YOUR PLACE: 401K with company match Comprehensive health and wellness packages Internal mobility team dedicated to helping you build your skills and own your career Professional growth opportunities including paid education and certifications Cutting-edge technology you can learn from Rest and recharge with paid vacation and 10 company-paid holidays The likely salary range for this position is $102,000 - $138,000. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range. Scheduled Weekly Hours: 40 Travel Required: None T elecommuting Options: Onsite Work Location: USA MD Annapolis Junction Additional Work Locations: USA VA Sterling Total Rewards at GDIT: Our benefits package for all US-based employees includes a variety of medical plan options, some with Health Savings Accounts, dental plan options, a vision plan, and a 401(k) plan offering the ability to contribute both pre and post-tax dollars up to the IRS annual limits and receive a company match. To encourage work/life balance, GDIT offers employees full flex work weeks where possible and a variety of paid time off plans, including vacation, sick and personal time, holidays, paid parental, military, bereavement and jury duty leave. To ensure our employees are able to protect their income, other offerings such as short and long-term disability benefits, life, accidental death and dismemberment, personal accident, critical illness and business travel and accident insurance are provided or available. We regularly review our Total Rewards package to ensure our offerings are competitive and reflect what our employees have told us they value most. Our Identity Verification Process: As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during virtual interviews. We reserve the right to take your picture to verify your identity and prevent fraud. By proceeding, you authorize the collection, processing, and use of your biometric data for identity verification and security purposes. About Our Work: We are GDIT. A global technology and professional services company that delivers technology solutions and mission services to every major agency across the U.S. government, defense and intelligence community. Our 26,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across 50+ countries worldwide, offering leading mission-ready capabilities in AI, cloud, cyber and software development. Join our Talent Community to stay up to date on our career opportunities and events at . Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans

This job posting is anticipated to remain open for 30 days, from 22-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: We're looking for a Cyber Threat Intelligence (CTI) Analyst to join our security organization and serve as a connective force across our Security Operations Center (SOC), Detection Engineering, Red Team, and Exposure Management functions. This is a highly cross functional role for someone who wants their intelligence work to directly shape what we detect, what we test, and what we prioritize fixing. You'll translate raw threat data into decisions: which adversary behaviors get new detections, which techniques the red team should emulate next, and which exposures matter most given who's actually targeting organizations like ours. What You'll Do: Track threat actors, campaigns, and TTPs relevant to our industry, geography, and technology stack, and translate findings into actionable intelligence products (briefs, actor profiles, trend reports). Partner with the SOC to enrich alerts and investigations with threat context, helping analysts triage faster and more accurately during active incidents. Work with Detection Engineering to identify coverage gaps against known adversary behavior (e.g., mapped to MITRE ATT&CK) and help prioritize new detections based on real world threat relevance. Collaborate with the Red Team to shape threat informed emulation plans, ensuring exercises reflect the tactics of adversaries most likely to target the organization. Feed intelligence into Exposure Management to help prioritize vulnerabilities, misconfigurations, and attack surface findings based on active exploitation trends and threat actor intent. Monitor open-source intelligence (OSINT), dark web sources, ISACs, and commercial threat feeds; assess relevance and reliability of incoming intelligence. Produce and maintain adversary tracking documentation, including TTP matrices, campaign timelines, and indicator repositories. Deliver both tactical (IOC/TTP-level) and strategic (executive-level trend and risk) intelligence outputs tailored to different stakeholders. Participate in incident response as a threat intelligence liaison, providing attribution context and likely adversary next-steps. Contribute to purple team exercises by bridging red team findings with detection and intelligence perspectives. What Experience You'll Need: 5+ years of experience in cyber threat intelligence, SOC, incident response, or a closely related security discipline. Solid working knowledge of the MITRE ATT&CK framework and experience mapping adversary behavior to it. Familiarity with threat intelligence platforms and OSINT collection/analysis techniques. Experience working with SIEM/EDR tooling to pivot on and validate intelligence. Understanding of vulnerability management and exposure management concepts. Strong written and verbal communication skills, with the ability to tailor technical intelligence for both analysts and executives. Analytical mindset with sound tradecraft: structured analytic techniques, confidence levels, and source reliability assessment. What Could Set You Apart: Familiarity with scripting or data analysis (Python, SQL) for intelligence automation or enrichment. Experience with STIX/TAXII or other structured threat data sharing standards. Prior experience in a fusion-center or cross-functional security model bridging detection, red teaming, and exposure/vulnerability management. Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .

This job posting is anticipated to remain open for 30 days, from 22-Oct-2026. The posting may close early due to the volume of applicants. Join a financial services firm where your contributions are valued. Edward Jones is a Fortune 500 company where people come first. With over 9 million clients and 20,000 financial advisors across the U.S. and Canada, we're proud to be privately-owned, placing the focus on our clients rather than shareholder returns. Behind everything we do is our purpose: We partner for positive impact to improve the lives of our clients and colleagues, and together, better our communities and society. We are an innovative, flexible, and inclusive organization that attracts, develops, and inspires performance excellence and a sense of belonging. People are at the center of our partnership. Edward Jones associates are seen, heard, respected, and supported. This is what we believe makes us the best place to start or build your career. View our Purpose, Inclusion and Citizenship Report . Fortune 500, published June 2024, data as of December 2023. Compensation provided for using, not obtaining, the rating. Team Overview: We're looking for a Cyber Threat Intelligence (CTI) Analyst to join our security organization and serve as a connective force across our Security Operations Center (SOC), Detection Engineering, Red Team, and Exposure Management functions. This is a highly cross functional role for someone who wants their intelligence work to directly shape what we detect, what we test, and what we prioritize fixing. You'll translate raw threat data into decisions: which adversary behaviors get new detections, which techniques the red team should emulate next, and which exposures matter most given who's actually targeting organizations like ours. What You'll Do: Track threat actors, campaigns, and TTPs relevant to our industry, geography, and technology stack, and translate findings into actionable intelligence products (briefs, actor profiles, trend reports). Partner with the SOC to enrich alerts and investigations with threat context, helping analysts triage faster and more accurately during active incidents. Work with Detection Engineering to identify coverage gaps against known adversary behavior (e.g., mapped to MITRE ATT&CK) and help prioritize new detections based on real world threat relevance. Collaborate with the Red Team to shape threat informed emulation plans, ensuring exercises reflect the tactics of adversaries most likely to target the organization. Feed intelligence into Exposure Management to help prioritize vulnerabilities, misconfigurations, and attack surface findings based on active exploitation trends and threat actor intent. Monitor open-source intelligence (OSINT), dark web sources, ISACs, and commercial threat feeds; assess relevance and reliability of incoming intelligence. Produce and maintain adversary tracking documentation, including TTP matrices, campaign timelines, and indicator repositories. Deliver both tactical (IOC/TTP-level) and strategic (executive-level trend and risk) intelligence outputs tailored to different stakeholders. Participate in incident response as a threat intelligence liaison, providing attribution context and likely adversary next-steps. Contribute to purple team exercises by bridging red team findings with detection and intelligence perspectives. What Experience You'll Need: 5+ years of experience in cyber threat intelligence, SOC, incident response, or a closely related security discipline. Solid working knowledge of the MITRE ATT&CK framework and experience mapping adversary behavior to it. Familiarity with threat intelligence platforms and OSINT collection/analysis techniques. Experience working with SIEM/EDR tooling to pivot on and validate intelligence. Understanding of vulnerability management and exposure management concepts. Strong written and verbal communication skills, with the ability to tailor technical intelligence for both analysts and executives. Analytical mindset with sound tradecraft: structured analytic techniques, confidence levels, and source reliability assessment. What Could Set You Apart: Familiarity with scripting or data analysis (Python, SQL) for intelligence automation or enrichment. Experience with STIX/TAXII or other structured threat data sharing standards. Prior experience in a fusion-center or cross-functional security model bridging detection, red teaming, and exposure/vulnerability management. Candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office four days per week effective June 1, 2026. Before June 1, 2026, candidates that live within a commutable distance from our Tempe, AZ and St. Louis, MO home office locations are expected to work in the office three days per week, with preference for Tuesday through Thursday. At Edward Jones, we are building a place where everyone feels like they belong. We're proud of our associates' contributions to the firm and the recognitions we have received. Check out our U.S. awards and accolades: Insights & Information Blog Postings about Edward Jones Check out our Canadian awards and accolades: Insights & Information Blog Postings about Edward Jones Edward Jones does not discriminate on the basis of race, color, gender, religion, national origin, age, disability, sexual orientation, pregnancy, veteran status, genetic information or any other basis prohibited by applicable law. Edward Jones' compensation and benefits package includes medical and prescription drug, dental, vision, voluntary benefits (such as accident, hospital indemnity, and critical illness), short- and long-term disability, basic life, and basic AD&D coverage. Short- and long-term disability, basic life, and basic AD&D coverage are provided at no cost to associates. Edward Jones offers a 401k retirement plan, and tax-advantaged accounts: health savings account, and flexible spending account. Edward Jones observes ten paid holidays and provides 15 days of vacation for new associates beginning on January 1 of each year, as well as sick time, personal days, and a paid day for volunteerism. Associates may be eligible for bonuses and profit sharing. All associates are eligible for the firm's Employee Assistance Program. For more information on the Benefits available to Edward Jones associates, please visit our benefits page .

Job Description Job Description We are seeking a highly accomplished Subject Matter Expert (SME) Systems Engineer to serve as a Senior Digital Transformation Architect & Strategist. In this role, you will define, integrate, and modernize the technical architecture for a centralized enterprise IT systems data ecosystem. You will serve as a strategic technical advisor to executive leadership, bridging the gap between high-level vision and engineering execution. The ideal candidate will have extensive experience designing secure, scalable architectures that support advanced threat detection, real-time monitoring, automation, predictive analytics, and compliance strategies within complex multi-network Intelligence Community (IC) environments. Specifically, you will lead the architectural evolution and integration of enterprise platform standards including Splunk, ServiceNow, and AppDynamics to drive end-to-end visibility and operational excellence. Future & Integrated Enterprise Architecture: Drive the development, evolution, and alignment of the future-state and integrated technical architecture for critical enterprise platforms, specifically ensuring seamless interoperability between Splunk, ServiceNow, and AppDynamics. Enterprise Technical Architecture: Define and maintain the end-to-end technical architecture for a centralized IT systems data ecosystem, ensuring complete alignment with strategic modernization goals and federal IT mandates. Digital Transformation Leadership: Drive mission enablement for Cyber, IT, and Insight Operations through the deployment of an AI-driven ecosystem that optimizes resources for data-driven success. Strategic Facilitation: Lead and facilitate leadership offsites, multi-agency working groups, and strategic technical discussions to identify and mitigate infrastructure gaps, platform limitations, technical debt, and disconnected workflows. Systems Integration: Lead massive-scale systems integration efforts across disparate technical teams, ensuring seamless integration of Commercial Off-The-Shelf (COTS) and custom-built solutions. Data Governance & Integrity: Build and operationalize robust data governance, data classification, and access control policies across hybrid cloud and on-premise environments in compliance with ICD 503, ICD 504, and upcoming AI mandates (e.g., ICD 505). Security & Compliance Architecture: Architect secure network segmentations, zero-trust frameworks, and cross-domain solutions (CDS) within highly complex security enclaves. Ensure technical systems satisfy strict federal accreditation and assessment (A&A) standards. Technical Mentorship & Governance: Provide technical leadership, conduct comprehensive code/architecture reviews, promote DevSecOps cultures, and establish rigorous performance benchmarks for engineering teams. Program Advisory Support: Assist in managing program scope, schedules, milestones, technical dependencies, and risk mitigation strategies to optimize the return on investment (ROI) for critical technical solutions. Requirements Required Qualifications Experience: Minimum of 20+ years of technical experience in Systems Engineering, Enterprise Architecture, Systems Integration, and Digital Transformation. Minimum of 15+ years of dedicated experience supporting the Intelligence Community (IC) and/or Department of Defense (DoD). Education: Bachelor's Degree in Information Technology, Systems Engineering, Business and IT, or a related technical discipline (or equivalent combination of education and experience). Security Clearance: Must possess an active TS/SCI with Polygraph. Required Technical & Core Competencies Enterprise Monitoring & ITSM Integration: Deep architectural understanding and proven ability to support the development of integrated future-state architectures combining Splunk (enterprise logging/SIEM), ServiceNow (ITSM/ITOM), and AppDynamics (application performance monitoring) to deliver holistic operational observability. Architectural Frameworks: Proven expertise using enterprise architecture methodologies (e.g., JARM, Gartner Enterprise Architecture, FEAF) to manage complex system-of-systems configurations. AI/ML Strategy: Broad understanding of the notional AI stack, machine learning lifecycles, full lifecycle model management, and integrating massive enterprise datasets with machine learning tools. Cloud & Infrastructure: Deep familiarity with secure, scalable hybrid cloud engineering solutions (e.g., AWS, cloud-native architectures) and cross-domain communications. Security Standards: Expert-level knowledge of Risk Management Frameworks (RMF), A&A processes, system hardening, and IC directives (including ICD 503, ICD 504, and NIST 800-53 standards). Agile & DevSecOps Mindset: Demonstrated experience championing SecDevOps best practices (automated security testing, IaC, CI/CD pipelines) and working within or across Agile/Scrum delivery teams. Tools: Proficiency utilizing workflow tracking and documentation platforms like JIRA and Confluence to manage system requirements and backlogs. Communication: Exceptional ability to synthesize complex architectural designs and technical issues into high-impact briefings and customer-facing dashboard presentations for senior executive leadership.

Job Description Job Description Description: Job Title: Security Control Assessor Location: On Site in Arlington, VA Department: Cyber Security Services Reports To: Management FLSA Status: Full Time/Non-exempt Job Purpose: The security control assessor (SCAs) supports a critical, objective role to evaluate the effectiveness of implemented controls in mitigating security risks. The SCA will support a critical mission within the intelligence community. In the role as a SCA, you are expected to use automated scanning tools, manual techniques, and specialized testing methodologies to identify weaknesses and vulnerabilities. The SCA is expected to be a collaborative member of the RMF program of the organization, to provide intelligent input to system security architectures in order to align with RMF principles and guidelines. This includes ensuring to guide the RMF process so that security controls are integrated seamlessly into system designs to provide comprehensive protection against threats and vulnerabilities. Duties & Responsibilities: The SCA's specific duties include: Advise the Information System Owner (ISO) concerning the impact levels for Confidentiality, Integrity, and Availability for the information on systems. Ensure security assessments are completed for each IS. Initiate a POA&M with identified weaknesses and suspense dates for each IS based on findings and recommendations from the SAR. Evaluate security assessment documentation and provide written recommendations for security authorization to the CISO and AO. Assess proposed changes to Information Systems, their environment of operation, and mission needs that could affect system authorization. Serve as a cybersecurity technical advisor to the CISO and AO under their purview. Be integral to the development of the monitoring strategy. The system-level continuous monitoring strategy must conform to all applicable published DoD enterprise-level or DoD Component-level continuous monitoring strategies. Determine and document in the SAR a risk level for every noncompliant security control in the system baseline. Determine and document in the SAR an aggregate level of risk to the system and identify the key drivers for the assessment. The SCA's risk assessment considers threats, vulnerabilities, and potential impacts as well as existing and planned risk mitigation. Develop the continuous monitoring plan specific to the information system. The SCA is responsible for the RMF deliverables associated with Step 4 of DOD and IC RMF Policies for assigned systems. This includes, but is not limited to: Security Assessment Plans tailored to specific systems control requirements Security control assessment input, which includes narratives for the review of controls and artifacts Security Assessment Reports ATO recommendations or ATO with Condition Memorandums Conduct initial remediation actions once a security assessment has been completed to ensure proper hand off to the ISSM and ISSOs. Assessment of selected controls IAW continuous monitoring strategy The SCA is expected to have additional duties as assigned in support of corporate cyber security services. Additional details are reviewed in accordance with company policies. Requirements: Required Skills & Experience: Strong knowledge of Risk Management Framework (RMF) 800-37 and continuous monitoring 800-137 Expert knowledge and hands-on experience with FISMA Systems, NIST 800-series guidelines, FIPS, Security Assessment & Authorization (SA&A) requirements and processes, Continuous Monitoring Framework experience and its tools, Plan of Action & Milestones (POA&M) policies, and vulnerability/patch management, risk management, project management, proficient with Microsoft products - Word, Excel, PowerPoint. Proficient with vulnerability and scanning tools and well-versed in interpreting risk posture resulting from assessment reports. Experience in project management and tracking, and the Microsoft suite of office products Experience of assessing cloud-based security authorizations (FedRamp, AWS & Azure) as well as the NIST control responsibilities Experience with SAP/JSIG Expert with documenting and or reviewing of security materials such as; system security plans (SSP), Security Assessment Report (SAR), and Security Assessment Plan (SAP), and other documents per NIST 800 guidelines. Experience supporting cloud-based security authorizations (FedRamp, AWS, & Azure) Experience creating Security Assessment Plans, Security Assessment Reports, and Executive-level briefings Qualifications: Bachelor's Degree in Computer Science or a related technical discipline Master's Degree preferred. Minimum 6-10 years of experience. Must currently possess an active TS/SCI with the ability to obtain and maintain a CI polygraph. DOD 8140 IAM Level II (CAP, CASP, CISM, CISSP, GSLC, CCISO) is required Systems Security Engineering background preferred. Effective communication skills to collaborate with cross-functional teams and stakeholders on implementing security measures organization-wide. Strong analytical skills for identifying system vulnerabilities and documenting control remediation recommendations through collaboration on System Impact Analysis and Documented Risk Acceptance. Detail-oriented with the ability to manage multiple tasks and prioritize effectively. Comprehensive knowledge of RMF activities at a senior level (ability to articulate to Executive audiences preferred). Familiarity with federal regulatory requirements, contractual obligations, and industry standards related to information security. Evaluate adherence to standards such as Privacy, GDPR, and HIPAA Other: This is typical office or administrative work, and there is no exposure to adverse environmental conditions. This position requires sedentary work. Sedentary work is defined as: Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects, including the human body. Sedentary work involves sitting most of the time. Jobs are sedentary if walking and standing are required only occasionally, and all other sedentary criteria are met.

Job Description Job Description cFocus Software seeks a SOC Lead to join our program supporting the United States Air Force (USAF). This position is on-site in Linthicum Heights, MD. This position requires an Active TS/SCI clearance. Qualifications: Active TS/SCI clearance B.S. Computer Science, Information Technology, or a related field Experience leading SOC personnel or comparable defensive cybersecurity operations. Experience directing alert triage, threat hunting, investigations, and incident response. Ability to manage operational priorities, analyst development, coverage, and handoffs. Knowledge of networks, endpoints, cloud environments, logs, and common cyberattack techniques. Experience with security monitoring, endpoint detection, vulnerability tools, and detection tuning. Ability to coordinate remediation and response across operations, engineering, and cybersecurity teams. Understanding of evidence handling, secure configurations, compliance records, and operational risk. Strong judgment and communication skills for timely Government reporting and incident coordination Duties: Lead SOC analysts and assigned response personnel; prioritize work, coach staff, review investigations, and maintain clear accountability for operational actions. Plan assigned staffing, coverage, on-call rotations, and handoffs to support required on-site and global response capabilities. Support SOC stand-up planning, tool configuration, sensor integration with command and control (C2) nodes, and enterprise scanning readiness. Coordinate centralized defensive operations, including monitoring, penetration testing support, threat hunting, cyber orders and taskers, and incident response. Oversee alert triage and analysis of security events and trends; validate findings, assess mission impact, and direct approved mitigation actions. Lead data and intelligence-driven threat hunting and anomaly investigations across DC3 information technology (IT) and operational technology (OT) environments. Direct incident detection, investigation, escalation, and approved containment, eradication, and recovery; keep Government stakeholders informed under established procedures. Review investigation evidence, incident timelines, and reports for accuracy and completeness; ensure response actions and handoffs are documented. Coordinate weekly vulnerability assessments with certified specialists; prioritize findings and track remediation with infrastructure, application, and cybersecurity teams. Maintain effective C2 coordination with Cybersecurity Service Providers (CSSPs), the AFCYBER Operations Center, and applicable higher headquarters authorities. Manage assigned cyber orders and taskers, coordinate implementation, and support required compliance documentation and Plans of Action and Milestones (POA&Ms). Assess SOC tools, telemetry coverage, and resource needs; recommend procurement and operational improvements through approved Government processes. Maintain incident response procedures, escalation guides, and operational documentation; incorporate lessons learned and submit required updates for Government approval. Coordinate with ISSOs and the ISSM to provide monitoring evidence and remediation status supporting RMF, authorization, and enterprise risk activities. Recommend improvements based on emerging threats, cybersecurity practices, and technologies, including benefits, risks, and implementation approaches. Powered by JazzHR atVWjQ7N5H

Job Description Job Description Description: Digital Envoy (DE) is the leader in geolocation and VPN data for over 25 years for customers in various verticals- Streaming Media, Ad Tech, Cybersecurity, E-commerce, and Data Analytics. Our core product, IP address geolocation, powers customers like Netflix, Hulu, Trade Desk, PayPal, AWS, Apple, and many others. Our VPN and Proxy data, coupled with accurate IP address geolocation, helps companies determine malicious activity for threat intelligence, authentication, and digital privacy. LocID is Digital Envoy's next-generation intelligence platform, built to solve one of the biggest challenges facing the advertising ecosystem: how to connect audiences, devices and media in a world where traditional identifiers are transient or disappearing. LocID transforms IP and other location signals into a privacy-first, globally consistent infrastructure that helps companies improve audience targeting, activation and measurement across CTV, digital and emerging channels. It is a fast-growing product at the center of Digital Envoy's expansion strategy, working with some of the world's leading AdTech, media and data businesses. Digital Envoy is looking for an ambitious Associate Account Executive to join the growing LocID commercial team. This is not a traditional sales role. We are looking for someone early in their sales career who is ready to move beyond simply generating meetings and begin learning how to build relationships, create demand, run discovery and ultimately become a successful Account Executive. The role has two distinct responsibilities. Approximately 60% of your time will be focused on agency adoption of LocID Curated audiences and segments, building relationships across major media agencies and helping planners, buyers, investment and programmatic teams understand how LocID-powered audiences can be activated across all appropriate campaign types through marketplaces and programmatic partners such as Index Exchange. The remaining 40% will support the earlier stages of our Data Platform sales motion, working under the direction of the GM, LocID and alongside the wider LocID management team. You will identify and develop opportunities, conduct the first one or two discovery conversations and help determine which opportunities should progress into deeper commercial and technical engagement. This is deliberately a role with room to grow. We want someone ambitious about building a career in sales and who wants increasing responsibility as they demonstrate they can handle it. There will be support, coaching and plenty of people to pull in when you need them. There will not be somebody sitting next to you every morning handing you a beautifully laminated list of things to do. This is a remote role, but much of the work happens face to face with agencies in New York, so we're prioritizing candidates based in the NYC area. Please note, at this time, Digital Envoy is not sponsoring visas for this position. WHAT YOU'LL DO: 60%: Agency Sales & LocID Curated Audiences Build and develop relationships across major agency holding companies and their operating agencies, including organisations such as Publicis, WPP, Dentsu, Omnicom, IPG and Havas. Develop relationships with planners, buyers, programmatic, data, investment and audience teams. Educate agency teams on LocID Curated audiences, available segments and relevant campaign use cases. Drive adoption of LocID Curated audiences across all appropriate campaign types, rather than treating them as a niche location product. Help agencies understand how LocID Curated audiences can be discovered and activated through marketplaces and partners such as Index Exchange. Identify briefs, campaigns, clients and planning opportunities where LocID Curated audiences are relevant. Work with marketplace and platform partners to make activation as simple as possible. Build relationships beyond one individual so adoption becomes repeatable across teams, accounts and agencies. Work with Marketing to develop the agency-facing materials, education and sales enablement needed to support adoption. Feed agency feedback, audience requirements and market intelligence back into the wider LocID team. Track adoption, opportunities, next steps and commercial activity accurately in Salesforce. The goal is not simply "get meetings with agencies." It is "get LocID Curated audiences used by agencies." That distinction matters. 40%: Data Platform Business Development Prospect into agreed Data Platform target accounts and sectors under the direction of the GM, LocID. Research companies, stakeholders, use cases and potential commercial opportunities. Conduct the first one or two discovery conversations with prospective customers. Understand the customer's business problem, current approach and potential LocID use case. Qualify whether there is a genuine opportunity worth progressing. Clearly document what you have learned and recommend the appropriate next step. Bring in the right members of the LocID management team depending on the opportunity. Work closely with Solutions Engineering and Product as conversations become more technical. Coordinate follow-up and maintain momentum after discovery. Learn how opportunities progress through technical evaluation, commercial negotiation and contracting. Gradually take greater ownership of opportunities as your experience and capability develop. We do not expect you to walk in on Monday and negotiate a seven-figure data licensing agreement by Friday. We do expect you to want to learn how. HOW YOU'LL WORK: LocID is a small, fast-moving business within Digital Envoy, so this role requires someone who is comfortable with independence, ownership, communication and ambiguity. You'll manage your own diary, prioritize accounts, identify opportunities and know when to move things forward independently versus when to bring in Product, Solutions Engineering, Marketing or the GM. Being a self-starter doesn't mean being a lone wolf - knowing when to pull in the right people will be key to your success. The role also involves travel across the US and potentially internationally for customer meetings, conferences and industry events, including regular meetings in New York. And yes, there will almost certainly be airport food. WHAT WE OFFER: Competitive Salary & Bonus program Medical, Dental and Vision Paid Holidays & Unlimited PTO policy 401(k) with employer contribution match We value your input: make a real impact in a growing, innovative company! Requirements: WHO YOU ARE: Approximately 2-4 years of experience in AdTech, media, programmatic advertising, data or agency-facing sales/business development. A genuine ambition to build a long-term career in sales and progress into a full Account Executive role. Existing knowledge of the US agency ecosystem and how media planning, buying, audiences and programmatic activation work. Strong existing relationships within major media agencies. Confidence running an initial customer discovery conversation rather than simply arranging one. Curiosity about technology, data, identity and the rapidly changing advertising ecosystem. Excellent communication and presentation skills. Strong organisation and follow-through. Comfort working independently without needing constant direction. An equally strong ability to work collaboratively and pull in specialists when required. Willingness and ability to travel for customers, agencies, conferences and industry events. Discipline around Salesforce and pipeline management, even if you have yet to experience the life-changing joy that apparently comes from a beautifully maintained CRM. Hungry to achieve success and ready to hit the ground running. WHAT SUCCESS LOOKS LIKE: Agency You are building credible relationships across the major agency groups, LocID Curated audiences are appearing in more briefs, plans and campaigns, agencies understand how and where to activate them, and we are seeing repeat adoption rather than isolated tests. Data Platform You can independently identify an interesting prospect, run a strong initial discovery conversation, understand and articulate the potential use case, qualify whether it is worth pursuing and bring the right LocID people into the next stage. Your Growth You are becoming a better salesperson. You are taking on more responsibility, needing less direction and demonstrating that you are ready to own increasingly complex opportunities. We are not recruiting you to be our SDR. We are recruiting you because we think you could become one of our Account Executives. The question is how quickly you can prove us right. About Digital Envoy: In 1999, Digital Envoy introduced the concept of privacy-sensitive IP-based geolocation and IP intelligence. This technology allows businesses from ad networks to publishers, websites, retailers and more to harness the power of location and new intelligence about connected users for many mission-critical applications. Digital Envoy has three business units that address the unique needs of customers: Digital Element, which provides global geolocation data and services that bring anytime, anywhere relevance and context to online and mobile initiatives; Digital Resolve . click apply for full job details

Job Description JOB DESCRIPTION As an X-Day Offensive Research (XOR) Vulnerability Researcher - Assessments & Exercises at JPMorganChase in the Cybersecurity & Technology Controls line of business, you will contribute significantly to enhancing the firm's cybersecurity or resiliency posture by using industry-standard assessment methodologies and techniques to proactively identify risks and vulnerabilities in people, processes, and technology. In this role, you will design and deploy risk-driven assessments (or manage a highly-skilled team that does) and inform analysis to clearly outline root causes. We are seeking a dedicated, self-motivated vulnerability researcher to tackle the complex demands of our mission. Working closely with fellow researchers and defense teams, you will investigate challenging targets, uncover novel attack surfaces, and develop innovative solutions that enhance our security posture. The ideal candidate combines deep technical curiosity with a strong background in reverse engineering, static analysis, and dynamic analysis, and thrives in a highly collaborative, research-driven environment. Job responsibilities Design and execute testing and simulations - such as penetration tests, technical controls assessments, cyber exercises, or resiliency simulations - and contribute to the development and refinement of assessment methodologies, tools, and frameworks to ensure alignment with the firm's strategy and compliance with regulatory requirements. Evaluate controls for effectiveness and impact on operational risk, as well as opportunities to automate control evaluation. Conduct in-depth vulnerability research and exploit development across a broad range of categories, including operating systems, mobile devices, web applications, browsers, edge devices, and enterprise software. Reverse engineer binaries using tools such as IDA Pro, Ghidra, or Binary Ninja to identify novel attack surfaces and develop proof-of-concept exploits. Use common vulnerability research toolsets such as fuzzers, disassemblers, debuggers, and code browsers for static and dynamic analysis. Perform N-day vulnerability analysis, patch diffing, and proof-of-concept exploit validation. Collaborate with cross-functional teams to develop comprehensive reports - including detailed findings, risk assessments, and remediation recommendations - supporting vulnerability triage, patch prioritization, and the sharing of indicators of compromise (IOCs) in service of the firm's mission requirements. Leverage threat intelligence and security research to stay ahead of emerging threats, vulnerabilities, industry best practices, and regulations, applying this knowledge to enhance the firm's assessment strategy and risk management, and engaging with peers and industry groups that share threat intelligence analytics. Document research findings, proof-of-concepts, and technical workflows to enable knowledge sharing and repeatability. Required qualifications, capabilities, and skills 5+ years of experience in cybersecurity or resiliency, with demonstrated exceptional organizational skills to plan, design, and coordinate the development of offensive security testing, assessments, or simulation exercises. Track record of discovered vulnerabilities (CVEs) in high-profile targets in at least one of the following categories: operating systems, mobile devices, web applications, browsers, edge devices, or enterprise software. Proven hands-on experience in vulnerability research, proof-of-concept exploit development, coordinated vulnerability disclosure, and mitigating security vulnerabilities in open-source projects. Expertise in advanced analysis frameworks leveraging symbolic execution techniques and dynamic binary instrumentation to identify, triage, and exploit complex software vulnerabilities. Hands-on proficiency exploiting complex vulnerability classes - including use-after-free, double free, type confusion - and applying advanced exploitation techniques such as heap spraying and controlled memory corruption to achieve reliable code execution. Strong understanding of the internals of at least two operating systems throughout user mode and kernel mode (Microsoft Windows, GNU/Linux, Android, macOS, or iOS). Experience auditing large C/C++, Java, and .NET codebases combining automated static analyzers with manual review to trace data and control flow, uncover memory-safety, injection, and deserialization vulnerabilities and produce proof-of-concept code. Extensive reverse engineering expertise on x86/x64 and ARM/ARM64 binaries, employing IDA Pro, Ghidra, Binary Ninja, WinDbg, GDB, and RR for deep static/dynamic analysis and root cause vulnerability discovery. Knowledge of US financial services sector cybersecurity or resiliency organization practices, operational risk management processes, principles, regulations, threats, risks, and incident response methodologies. Ability to identify systemic security or resiliency issues as they relate to threats, vulnerabilities, or risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents. Excellent communication, collaboration, and report writing skills, with the ability to influence and engage stakeholders across various functions and levels. Preferred qualifications, capabilities, and skills Bachelor's degree in computer science, or PhD in a related technical field, or an equivalent combination of education and/or experience in a related field. 5+ years of experience in vulnerability research and exploit development. Experience using fuzzing tools such as LibFuzzer, LibAFL, AFL , OSS-Fuzz, and Syzkaller. Experience using program analysis tools such as LLVM, Angr, KLEE, Intel Pin, DynamoRIO, and Frida. Experience emulating embedded platforms for live debugging. Experience with kernel and low-level operating system development. Deep Linux internals knowledge (SELinux, AppArmor, Seccomp, eBPF, containers, VMs). Deep Windows internals knowledge (KASLR, DSE, SSDT, IDT, SMEP, SMAP, PXN, KPP, KDP, VBS, HVCI, KMCI, UMCI). ABOUT US JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management. We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans ABOUT THE TEAM The Cybersecurity & Technology Controls group at JPMorganChase aligns the firm's cybersecurity, access management, controls and resiliency teams. The group proactively and strategically partners with all lines of business and functions to enable them to design, adopt and integrate appropriate controls; deliver processes and solutions efficiently and consistently; and drive automation of controls. The group's number one priority is to enable the business by keeping the firm safe, stable and resilient. High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment.

Job Description JOB DESCRIPTION Contribute to leading-edge security and resilience efforts, advancing protective strategies and propelling continuous improvement. As an Assessments & Exercises Vice President in the Cybersecurity and Technology Controls line of business, you will contribute significantly to enhancing the firm's cybersecurity or resiliency posture by using industry-standard assessment methodologies and techniques to proactively identify risks and vulnerabilities in people, processes, and technology. Design and deploy risk-driven tests and simulations (or manage a highly skilled team that does) and inform analysis to clearly outline root-causes. In this role, you will evaluate preventative controls, incident response processes, and detection capabilities, and advise cross-functional teams on security strategy and risk management. JPMC's Assessment Operations organization is looking to expand its Cybersecurity Red Team with an experienced Business Process Red Team Operator specialized in social engineering, penetration testing, Artificial Intelligence, and assessments of critical business processes such as payment operations, fraud, and supplier management. The primary focus of this role will be to perform and manage hands-on offensive security activities as part of Red Team engagements against critical JPMC assets. The successful candidate will have a proven track record in cybersecurity assessments, to include social engineering operations like phishing and vishing, and will be able to demonstrate knowledge of computer networking fundamentals, modern threats and vulnerabilities, attack methodologies, and penetration testing tools. The Cybersecurity Red Team consists of highly skilled and qualified members who conduct advanced adversary emulation operations to replicate cybersecurity threats targeting the firm. This position is anticipated to require the use of one or more High Risk Role (HRR) systems, which mandates successful completion of enhanced screening, including criminal and credit background checks, before starting employment and annually thereafter. Job responsibilities Perform and manage hands-on offensive security activities leveraging social engineering skillsets as part of Red Team engagements against critical JPMC assets Conduct business process assessments to include tabletop or workshop sessions, live testing of business process controls by technical and social engineering attacks, and preparation of deliverables for senior stakeholders Design and execute testing and simulations - such as penetration tests, technical controls assessments, cyber exercises, or resiliency simulations, and contribute to the development and refinement of assessment methodologies, tools, and frameworks to ensure alignment with the firm's strategy and compliance with regulatory requirements Evaluate controls for effectiveness and impact on operational risk, as well as opportunities to automate control evaluation Collaborate closely with cross-functional teams to develop comprehensive assessment reports - including detailed findings, risk assessments, and remediation recommendations - making data-driven decisions that encourage continuous improvement Utilize threat intelligence and security research to stay informed about emerging threats, vulnerabilities, industry best practices, and regulations. Apply this knowledge to enhance the firm's assessment strategy and risk management. Engage with peers and industry groups that share threat intelligence analytics Required qualifications, capabilities, and skills 5+ years of experience in cybersecurity or resiliency, with demonstrated exceptional organizational skills to plan, design, and coordinate the development of offensive security testing, assessments, or simulation exercises Knowledge of US financial services sector cybersecurity or resiliency organization practices, operations risk management processes, principles, regulations, threats, risks, and incident response methodologies Ability to identify systemic security or resiliency issues as they relate to threats, vulnerabilities, or risks, with a focus on recommendations for enhancements or remediation, and proficiency in multiple security assessment methodologies (e.g., Open Worldwide Application Security Project (OWASP) Top Ten, National Institute of Standards and Technology (NIST) Cybersecurity Framework), offensive testing tools, or resiliency testing equivalents Excellent communication, collaboration, and report writing skills, with the ability to influence and engage stakeholders across various functions and levels Candidate should have the ability to perform targeted, covert security tests with vulnerability identification, exploitation, and post-exploitation activities Strong understanding of the following: Networking fundamentals (all OSI layers, protocols); Windows/ Linux/Unix/Mac operating systems as well as software vulnerability and exploitation techniques; commercial or open-source offensive security tools for reconnaissance, scanning, exploitation, and post-exploitation (e.g. Cobalt Strike, Metasploit, Nmap, Nessus, Burp Suite) Familiarity with AI/ML technologies and tools and operationalizing their use in Red Teaming (e.g., developing video and audio deepfakes, etc.), as well as with system administration skills such as configuration, maintenance, and interpretation of log output from networking devices, operating systems, and infrastructure services and with cloud architecture, operations, and security vulnerabilities Ability to collaborate with high-performing teams and individuals throughout the firm to accomplish common goals Broad experience in multiple businesses or verticals, with organizational and cultural understanding of call centers, payments processes, client service/sales organizations, and operational support staff The ability to articulate and visually present complex technical and fraud subject matter to a wide and senior audience Ability to analyze and produce reports about cybersecurity and fraud vulnerabilities, threats, designs, and procedures Preferred qualifications, capabilities, and skills Social engineering background (or intelligence, law enforcement, or similar experience) Experience in fraud detection and prevention, with a proven track record in identifying, analyzing, and mitigating fraud risks within financial systems or similar environments. Understanding of relevant regulations and compliance requirements related to fraud prevention, such as AML (Anti-Money Laundering) and KYC (Know Your Customer) standards Relevant certifications such as those offered by Offensive Security (OSCP, OSEP), CREST (Certified Simulated Attack Specialist), SANS (GPEN, GWAPT), fraud-specific certifications such as Certified Fraud Examiner or Certified Anti-Money Laundering Specialist (CAMS) Technical knowledge such as: developing in-house scripting; using interpreted languages (such as Ruby, Python, or Perl) and compiled languages (such as C, C++, C#, or Java); understanding security tools or technology such as firewalls, IDS/IPS, web proxies, and DLP Information Security experience in two or more of the following verticals: fraud operations, threat modeling, network/application security testing, social engineering, Red Team operations, and network exploitation operations Ability to support and grow skillsets for Cybersecurity Red Team operations ABOUT US JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management. We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans ABOUT THE TEAM . click apply for full job details

Intro Are you ready to explore a world of possibilities, both at work and during your time off? Join our American Airlines family, and you'll travel the world, grow your expertise and become the best version of you. As you embark on a new journey, you'll tackle challenges with flexibility and grace, learning new skills and advancing your career while having the time of your life. Feel free to enrich both your personal and work life and hop on board! Why you'll love this job As one diverse, high-performing team dedicated to technical excellence, you will focus relentlessly on delivering unrivaled digital products that drive a more reliable and profitable airline. As a Cybersecurity GRC Engineer/Sr. Engineer focused on Risk Management, you will help shape and advance cybersecurity risk management capabilities that translate technical risk into prioritized business decisions and action. You will apply expertise in cyber risk analysis, risk and control practices, risk intelligence, metrics, data, and GRC technology to strengthen how cybersecurity risks are identified, analyzed, treated, monitored, and communicated. You will have the opportunity to engineer scalable risk management practices and data-driven capabilities that help American anticipate evolving threats, technologies, regulatory expectations, and business needs. What you'll do As noted above, this list is intended to reflect the current job but there may be additional essential functions (and certainly non-essential job functions) that are not referenced. Management will modify the job or require other tasks be performed whenever it is deemed appropriate to do so, observing, of course, any legal obligations including any collective bargaining obligations. Apply Specialized GRC Expertise: Interpret cybersecurity frameworks, regulatory requirements, enterprise policies, risk methodologies, and control expectations to translate complex requirements into practical governance, risk, compliance, and portfolio management practices. Design and Mature GRC Processes and Control Practices: Develop, refine, and operationalize policies, standards, procedures, control mappings, assessment methods, evidence expectations, and governance routines that improve consistency, quality, and defensibility across cybersecurity activities. Perform Advanced Risk, Control, and Compliance Analysis: Evaluate risks, control gaps, compliance obligations, remediation plans, exceptions, issues, and supporting evidence to determine impact, root cause, prioritization, and appropriate risk response. Exercise Independent Technical Judgment: Develop recommendations, influence operating practices, and determine how GRC, portfolio, work management, and financial governance activities should be structured, measured, and executed to improve cyber risk outcomes. Lead Technical Execution for Assessments, Audits, and Regulatory Requests: Coordinate and execute control assessments, audit responses, evidence reviews, regulatory requests, testing activities, and issue validation by applying technical judgment to determine whether control design and operating effectiveness are supported. Build and Maintain Cyber Portfolio Operating Practices: Develop and manage work intake, prioritization methods, roadmaps, delivery plans, dependency tracking, decision logs, status reporting, portfolio health views, and execution routines that enable cybersecurity leaders to manage commitments and outcomes. Analyze Financial, Resource, and Delivery Information: Evaluate budgets, forecasts, run-rate trends, resource plans, vendor and contractor spend, purchase activity, and delivery commitments to identify gaps, tradeoffs, risks, and opportunities to improve portfolio decision-making. Develop Metrics, Insights, and Executive-Ready Reporting: Define, validate, analyze, and communicate cybersecurity, compliance, portfolio, financial, and operational metrics that support leadership visibility, risk-informed decisions, and measurable improvement. Serve as a Subject Matter Resource: Provide guidance to cybersecurity, technology, business, finance, sourcing, legal, privacy, and audit stakeholders on GRC requirements, control expectations, portfolio processes, work management practices, and financial governance activities. Drive Continuous Improvement and Automation Opportunities: Identify and implement improvements to workflows, tools, templates, data quality, reporting, documentation, and operating practices to increase efficiency, reduce manual effort, and improve the quality of GRC and portfolio management outcomes. All you'll need for success Minimum Qualifications - Education & Prior Job Experience Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Business, Risk Management, Compliance, Audit, Finance, Data Analytics, Project/Portfolio Management, or a related technical or business discipline, or equivalent experience/training. Experience applying cybersecurity governance, risk, compliance, control, technology risk, audit, cyber portfolio management, work management, or financial management practices to interpret requirements, analyze information, coordinate execution, and support risk-informed stakeholder decisions. Experience working with cybersecurity, risk, compliance, control, portfolio, financial, resource, vendor, or delivery data to identify issues, assess impacts, track decisions, develop reporting, and contribute to process, control, or portfolio outcome improvement. Preferred Qualifications - Education & Prior Job Experience Advanced education, coursework, or specialized training in cybersecurity, information security, risk management, compliance, audit, information systems, data analytics, finance, project/portfolio management, or a related technical or business discipline preferred. Experience in a specialized cybersecurity governance, risk, compliance, cyber portfolio management, work management, audit, or technology risk role with ownership for interpreting requirements, designing or improving processes, and providing recommendations to stakeholders preferred. Experience applying cybersecurity, risk, compliance, and control frameworks such as NIST, ISO 27001, PCI DSS, SOX, SOC 2, CMMC, or similar standards to control mapping, assessments, evidence expectations, remediation activities, and governance practices preferred. Experience evaluating control design, operating effectiveness, risk impact, compliance gaps, exceptions, issues, remediation plans, and supporting evidence using structured analysis and technical judgment preferred. Experience developing or maturing GRC operating practices, control libraries, assessment methods, workflow routines, intake and prioritization models, portfolio roadmaps, dashboards, decision materials, or governance forums preferred. Experience analyzing cybersecurity portfolio, financial, vendor, contractor, resource, delivery, or work management data to identify trends, risks, tradeoffs, and recommendations preferred. All you'll need for success (Continued ) Skills, Licenses, and Certifications Deep working knowledge of cybersecurity risk management, including risk identification, analysis prioritization, treatment, monitoring, and communication.Strong understanding of cybersecurity controls and the relationship between threats vulnerabilities, controls, business impact, and risk. Experience developing or improving cybersecurity risk methodologies, assessment approaches, risk and control libraries, issue and exception practices, or risk treatment processes. Ability to analyze complex technical and business information, develop defensible risk conclusions, and translate cyber risk into clear priorities, recommendations, and actions. Experience developing risk metrics, key risk indicators, measurement approaches, and reporting that provide meaningful insight into cybersecurity risk and support risk-informed decisions. Working knowledge of cybersecurity and risk frameworks such as NIST Cybersecurity Framework, NIST Risk Management Framework, NIST SP 800-30, ISO 27001/27005, or comparable industry frameworks and methodologies. Experience using cybersecurity, risk, control, and related data to identify relationships, trends, concentrations, and insights that improve risk prioritization and decision-making. Working knowledge of data modeling, data quality, integration, analytics, or visualization concepts used to support cybersecurity risk intelligence and reporting. Experience using or improving GRC platforms and related workflows, integrations, automation, and reporting capabilities to strengthen risk management processes and data quality. Demonstrated curiosity and ability to evaluate and apply AI, automation, and emerging technologies to advance cybersecurity risk management, including identifying practical opportunities to improve risk analysis, intelligence, workflows, and team effectiveness. Demonstrated ability to independently translate objectives into structured approaches, manage complex work, exercise technical judgment, and drive high-quality outcomes with limited day-to-day oversight. Strong communication and advisory skills, including the ability to explain cyber risk, technical considerations, control implications, and recommendations to technical, business, and executive stakeholders. Demonstrated curiosity and ability to evaluate emerging cybersecurity, risk, data . click apply for full job details

Job Description Job Description Implementing the Microsoft Defender solution and supporting the transition to emerging Microsoft technologies. Experience with the Microsoft Defender Suite including Microsoft Defender for Endpoint (MDE), Microsoft Defender for Office (MDO), Defender Cloud Apps (MDCA), and Mobile Threat Defender (MTD) is needed, and to assist with deployment of complex architectures based on Microsoft Intune, Endpoint manager, and 365 Defender center. In addition to implementing the Microsoft Defender solution including MDE, MDO, MDCA, and MTD, this position will be responsible for developing SOPs/TTPS for maintaining agent handlers, repositories, Microsoft Intune, Microsoft 365 Defender, and Microsoft Defender for Cloud Apps and support the transition from DoD Enterprise Capabilities to emerging Microsoft technologies. This position will deploy complex architectures based on Microsoft Intune, Endpoint manager, and 365 Defender center, coordinating efforts to test and verify solutions for future implementation. This position requires the ability to work core hours between 6:00 am to 6:00 pm during the week and participate in on-call rotation for after-hours support. Requirements Experience with Microsoft Intune and Microsoft Defender Experience with server management, including virtualization, and Windows server administration Experience with scripting languages, including PowerShell and KQL Experience with Azure in hybrid environments, Active Directory on prem and cloud, and Group Policies Experience with end user technology deployments and upgrades Experience with supporting Microsoft Defender for Endpoint (MDE), Microsoft Defender for Office (MDO), Microsoft Defender for Cloud and Sentinel, Microsoft Defender for Endpoint Mobile Threat Defense (MTD), Microsoft Endpoint Manager Admin Center, Microsoft Security Administration, Microsoft Office 365, and Microsoft Configuration management service center Active TS/SCI clearance; willingness to take a polygraph exam HS diploma or GED and 7+ years of experience with supporting IT projects and activities, Associate's degree and 5+ years of experience with supporting IT projects and activities, or Bachelor's degree and 3+ years of experience with supporting IT projects and activities DoD 8570 IAT Level II Certification, including CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP Certification Ability to obtain a DoD 8570.01-M Cybersecurity Service Provider - Infrastructure Support Certification, including CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND Certification within 60 days of start date Optional Qualifications: Experience in managing and administrating systems associated with software deployments, patches, and scripts to a large enterprise environment Experience in collaborating with peers and managers to identify, manage, and generate appropriate reporting and metrics standards based on deployments and management needs Experience with managing complex IT projects involving multiple teams or organizations Experience with tracking and resolving incidents via ticket queue Experience with providing hands on PC and mobile support to end users Ability to be an active member and solve problems by recommending outside-the-box, cost effective solutions Ability to pay strict attention to detail Possession of excellent written and verbal communication and interpersonal skills Benefits Essential Network Security (ENS) Solutions, LLC is a service-disabled veteran owned, highly regarded IT consulting and management firm. ENS consults for the Department of Defense (DoD) and Intelligence Community (IC) providing innovative solutions in the core competency area of Identity, Credential and Access Management (ICAM), Software Development, Cyber and Network Security, System Engineering, Program/Project Management, IT support, Solutions, and Services that yield enduring results. Our strong technical and management experts have been able to maintain a standard of excellence in their relationships while delivering innovative, scalable and collaborative infrastructure to our clients. Why ENS? Free Platinum-Level Medical/Dental/Vision coverage, 100% paid for by ENS 401k Contribution from Day 1 PTO + 11 Paid Federal Holidays Long & Short Term Disability Insurance Group Term Life Insurance Tuition, Certification & Professional Development Assistance Workers' Compensation Relocation Assistance Candidate AI Usage Policy AI tools are an important part of daily work at ENS Solutions, and we are committed to their responsible and ethical use. To ensure a fair and equitable candidate evaluation based on individual skills, knowledge, and experience, candidates are not permitted to use artificial intelligence or other assistive tools during interviews, whether in person or virtual, unless explicit permission has been granted in advance.

Job Description Job Description About Agile Defense At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility-leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation's vital interests. This role serves as the senior cybersecurity and DevSecOps lead responsible for integrating security, risk management, and compliance across data, AI, and software delivery efforts. The position ensures Government security requirements are translated into actionable engineering practices, oversees RMF and authorization support activities, and directs continuous security monitoring throughout the system lifecycle. Working closely with technical leads, regional teams, and Government stakeholders, this role drives secure implementation, risk-informed decision-making, and enterprise-wide consistency in support of mission-critical capabilities. Translate Government security requirements into contractor engineering practices, security acceptance criteria, and reusable control evidence across the enterprise hub, regional teams, and resident command teams. Identify and assess risks introduced by data and AI capabilities. Direct threat modeling and security testing covering data and model integrity, unauthorized disclosure, adversarial manipulation, and software supply-chain dependencies. Lead Risk Management Framework (RMF) artifact development with Information Systems Security Officers and Security Control Assessor Representatives. Coordinate assessments and prepare evidence supporting authorization to test, connect, and operate. Direct implementation and management of continuous integration and continuous delivery (CI/CD) security capabilities supporting DevSecOps. Embed vulnerability detection, automated security testing, and remediation verification into delivery workflows. Coordinate with the Data Operations Technical Lead on data protection, access controls, and secure infrastructure, and with the Data Science and Analytics Technical Lead and other task leads on AI-specific risks, experimentation, release readiness, and sustainment. Oversee continuous security-control monitoring and risk reassessment. Maintain actionable remediation priorities, control evidence, and security transition information for each supported capability. Provide technical direction and coaching to assigned cybersecurity, RMF, and DevSecOps personnel. Work through regional management teams to correct security nonconformance and align local execution with enterprise requirements. Report security risks, authorization dependencies, and remediation status to the Program Manager and Government stakeholders. Recommend corrective action and document security concurrence for contractor release reviews. Minimum Qualifications It is required that the AI Security and Assurance Technical Lead has the following qualifications: A bachelor's or advanced degree in cybersecurity, computer science, information systems, engineering, or a related discipline 8 years of progressively responsible experience in cybersecurity, security engineering, or secure digital-capability delivery, including at least three years supporting Department of War or Intelligence Community environments. 3 years leading cybersecurity technical teams or workstreams responsible for RMF assessment and authorization and secure software or data-platform delivery. Experience securing AI/ML capabilities and automated delivery pipelines in classified, cloud, or tactical-edge environments, including reuse of security controls and evidence across authorized environments. Experience applying AI risk-management methods, including the NIST AI Risk Management Framework, to security planning and technical assurance. Active TS/SCI clearance and maintain the clearance and access required for the assignment Our Core Values Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together. What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are. Happy - Be Infectious. Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do. Helpful - Be Supportive. Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated. Honest - Be Trustworthy. Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support. Humble - Be Grounded. Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task. Hungry - Be Eager. Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges. Hustle - Be Driven. Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.